$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa File: c38a686c-1237-3b63-8f94-0581beb86b44.roa (raw, json) Hash identifier: ocDUb6MDWldowrfGiGh810DnfxMh2Ebwtq6fRSm24HI= Subject key identifier: F5:FF:1B:07:E2:50:92:94:9B:53:49:DD:BD:F2:47:F7:1A:0D:66:64 Certificate issuer: /CN=9281adc0-928e-432b-8a28-e77e9cddfcfe Certificate serial: 010D0C9F4328584A9FFB8D6504D9AF3115C9EF00 Authority key identifier: B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 13543 IP address blocks: 162.253.96.0/22 maxlen: 24 2620:f4:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:8d:65:04:d9:af:31:15:c9:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9281adc0-928e-432b-8a28-e77e9cddfcfe Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=fbfc6988-2897-4bbb-9fde-4eaf987c4aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:27:2c:c6:1e:ab:2e:ec:81:2f:1a:6e:16: ec:52:6e:a0:0d:dc:92:1a:2a:46:01:e5:97:95:a6: a1:2b:74:0e:75:58:23:88:01:fb:44:a7:1b:cd:e0: 79:6c:59:50:f6:a9:53:92:55:cc:bd:1b:d0:89:50: da:90:99:f3:5b:9c:c5:1c:58:d8:2c:bd:16:a8:90: dd:84:4d:c5:d4:1a:85:b4:a0:22:ba:97:32:62:c6: 73:ee:89:e7:ec:07:c9:fe:3c:be:a3:1e:af:56:05: 0a:02:f0:b6:a5:8a:11:54:c0:e1:54:7a:d2:e0:36: 14:61:8d:a3:9c:64:33:4c:a3:a2:91:bf:17:97:88: 24:af:01:1d:62:ee:5b:e4:84:1b:b8:9f:bd:65:71: 99:e6:3d:44:55:4e:12:52:fa:e3:58:2c:a9:6f:58: 13:11:97:02:84:0d:a0:70:09:61:32:20:ca:61:b9: 91:c7:94:da:bb:2e:88:4c:71:59:6f:ea:b3:c2:8e: a2:95:58:f3:10:2d:ed:f3:f2:51:60:8c:55:f2:b9: 41:98:a6:c1:4c:4d:e7:11:2a:7c:dd:3d:05:2a:5c: 25:55:1a:fd:ee:78:a9:7e:59:fd:b3:b8:4d:0e:1d: 09:f2:a6:fa:d0:3e:58:d0:28:da:26:ad:4c:f7:70: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FF:1B:07:E2:50:92:94:9B:53:49:DD:BD:F2:47:F7:1A:0D:66:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl X509v3 Authority Key Identifier: keyid:B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer sbgp-ipAddrBlock: critical IPv4: 162.253.96.0/22 IPv6: 2620:f4:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:27:de:4a:69:f6:bc:2b:28:40:e6:6d:88:c7:47:6b:21:fa: 33:5a:e7:df:14:51:9f:55:5c:44:1e:e8:b8:f8:d7:df:41:54: 03:ac:65:cf:f9:33:22:06:9f:44:af:96:fe:08:41:54:e3:0c: 5f:8c:94:f2:8a:ec:96:53:1b:b6:ab:43:93:a5:91:66:c3:84: aa:b9:c9:44:3b:ce:89:a0:b5:93:f5:57:ef:4f:ba:1b:7b:2c: 16:5e:b8:5a:8d:9c:c9:ad:a6:ed:32:22:27:5b:45:ff:df:02: d1:ab:f7:84:1a:f1:c7:40:72:fa:f6:17:94:55:dc:a8:52:06: d8:23:7d:50:ac:f8:80:ce:10:e3:24:3f:e8:b5:c6:9d:7e:bc: d2:af:8b:c1:88:3e:6d:e0:4e:fc:eb:d9:2b:c2:f2:6a:6f:df: 28:d1:66:76:59:c5:a2:eb:6c:81:6e:dc:2f:33:b2:ac:b5:a5: 80:38:6e:f0:6c:b3:9d:36:3f:0f:95:1b:41:1d:d8:1c:0a:dc: 3d:84:df:cc:c4:53:23:cc:5e:56:7f:bb:96:5b:55:db:c5:3a: b7:77:9e:57:76:61:d4:5f:6d:79:9f:0a:fd:6f:37:8c:b7:c1: b7:38:d5:c4:15:eb:35:cb:ce:c8:2d:69:0c:cb:e6:21:20:36: 73:3c:65:25 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqf+41lBNmvMRXJ7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4MWFkYzAtOTI4ZS00MzJiLThhMjgtZTc3ZTljZGRm Y2ZlMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZmJmYzY5ODgtMjg5Ny00YmJiLTlmZGUtNGVhZjk4N2M0YWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKUnLMYeqy7sgS8abhbsUm6gDdySGipGAeWX laahK3QOdVgjiAH7RKcbzeB5bFlQ9qlTklXMvRvQiVDakJnzW5zFHFjYLL0WqJDd hE3F1BqFtKAiupcyYsZz7onn7AfJ/jy+ox6vVgUKAvC2pYoRVMDhVHrS4DYUYY2j nGQzTKOikb8Xl4gkrwEdYu5b5IQbuJ+9ZXGZ5j1EVU4SUvrjWCypb1gTEZcChA2g cAlhMiDKYbmRx5Tauy6ITHFZb+qzwo6ilVjzEC3t8/JRYIxV8rlBmKbBTE3nESp8 3T0FKlwlVRr97nipfln9s7hNDh0J8qb60D5Y0CjaJq1M93DoeQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPX/GwfiUJKUm1NJ3b3yR/caDWZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjgx YWRjMC05MjhlLTQzMmItOGEyOC1lNzdlOWNkZGZjZmUvYzM4YTY4NmMtMTIzNy0z YjYzLThmOTQtMDU4MWJlYjg2YjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI4MWFkYzAtOTI4ZS00MzJiLThh MjgtZTc3ZTljZGRmY2ZlLzkyODFhZGMwLTkyOGUtNDMyYi04YTI4LWU3N2U5Y2Rk ZmNmZS5jcmwwHwYDVR0jBBgwFoAUs3fmz1nG6JnU5+sbW6FMixQQUCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjgxYWRjMC05MjhlLTQzMmItOGEyOC1lNzdl OWNkZGZjZmUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCov1gMA8E AgACMAkDBwAmIAD0wAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQifeSmn2vCsoQOZtiMdHayH6M1rn3xRR n1VcRB7ouPjX30FUA6xlz/kzIgafRK+W/ghBVOMMX4yU8orsllMbtqtDk6WRZsOE qrnJRDvOiaC1k/VX70+6G3ssFl64Wo2cya2m7TIiJ1tF/98C0av3hBrxx0By+vYX lFXcqFIG2CN9UKz4gM4Q4yQ/6LXGnX680q+LwYg+beBO/OvZK8Lyam/fKNFmdlnF outsgW7cLzOyrLWlgDhu8GyznTY/D5UbQR3YHArcPYTfzMRTI8xeVn+7lltV28U6 t3eeV3Zh1F9teZ8K/W83jLfBtzjVxBXrNcvOyC1pDMvmISA2czxlJQ== -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:50 2025 by rpki-client